diff --git a/README.md b/README.md
index bad2e61a..a096b64c 100644
--- a/README.md
+++ b/README.md
@@ -185,6 +185,11 @@ a graphical interface to the daemon using the [`iced`](https://github.com/iced-r
 
 The code for the GUI can be found in the [`gui/src/`](gui/src) folder.
 
+## Security
+
+See [`SECURITY.md`](SECURITY.md) for details about reporting a security vulnerability or any bug
+that could potentially impact the security of users' funds.
+
 ## License
 
 Released under the BSD 3-Clause Licence. See the [LICENCE](LICENCE) file.
diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 00000000..e90f388e
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,10 @@
+# Security policy
+
+Please report any vulnerability or any bug that could potentially affect the security of users'
+funds by mail to [`antoine@wizardsardine.com`](mailto:antoine@wizardsardine.com).
+
+You may use my GPG public key to encrypt your mail: `590B7292695AFFA5B672CBB2E13FC145CD3F4304`. You
+can get it from:
+- [`keys.openpg.org`](https://keys.openpgp.org/search?q=darosior%40protonmail.com): `gpg --keyserver hkps://keys.openpgp.org --receive 590B7292695AFFA5B672CBB2E13FC145CD3F4304`.
+- [My personal website](http://download.darosior.ninja/darosior.pub)
+- [Bitcoin Core's `guix.sigs` Github repository](https://github.com/bitcoin-core/guix.sigs/blob/main/builder-keys/darosior.gpg)